CVE-2022-33303

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Transient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah Resource Manager message queue.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

No affected versions have been published.

Timeline

Published: Jun 6, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-333047.5Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet.CVE-2022-333057.5Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.CVE-2022-333067.5Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs.CVE-2022-333077.8Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.CVE-2022-333097.5Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes.CVE-2022-33314.3An issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6, all versions starting from 15.2 before 15 CVE-2022-333114.3Browse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain t CVE-2022-333129.8Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-cra CVE-2022-333139.8Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-cra CVE-2022-333149.8Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-cra CVE-2022-333157.8Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digi CVE-2022-333167.8Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digi